Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

Fedora 43: django-important Security Vulnerability 2025-6748b1c2d28

fedora
Calendar Grey September 9, 2025
Dist Fedora Esm H88
Fedora 42 has a major update for Python-Flask that fixes critical security vulnerabilities. Apply the update with `sudo dnf update python-flask` to safeguard your applications
Update to 3.1.2

Summary

Flask is called a \u201cmicro-framework\u201d because the idea to keep the core

simple but extensible. There is no database abstraction layer, no form

validation or anything else where different libraries already exist

that can handle that. However Flask knows the concept of extensions

that can add this functionality into your application as if it was

implemented in Flask itself. There are currently extensions for object

relational mappers, form validation, upload handling, various open

authentication technologies and more.

Update Information:

Update to 3.1.2

Topics%20covered

Topics Covered

security advisory fedora important python flask session signing

Change Log

* Sun Aug 31 2025 Franti\u0161ek Zatloukal - 1:3.1.2-2 - Do some shuffling to work on f42 and epel10 * Sun Aug 31 2025 Franti\u0161ek Zatloukal - 1:3.1.2-1 - Update to 3.1.2 (RHBZ#2389601) * Fri Aug 15 2025 Python Maint - 1:3.1.1-4 - Rebuilt for Python 3.14.0rc2 bytecode * Fri Jul 25 2025 Fedora Release Engineering - 1:3.1.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Tue Jun 3 2025 Python Maint - 1:3.1.1-2 - Rebuilt for Python 3.14 * Tue May 20 2025 Karolina Surma - 1:3.1.1-1 - Update to 3.1.1

References


[ 1 ] Bug #2366240 - CVE-2025-47278 python-flask: Flask Session Signing Fallback Key Vulnerability [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2366240

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-55e69c9cea' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: python-flask
Product: Fedora 42
Version: 3.1.2
Release: 2.fc42
URL: https://flask.palletsprojects.com/en/stable/
Summary: A micro-framework for Python based on Werkzeug, Jinja 2 and good intentions

Topics%20covered

Topics Covered

security advisory fedora important python flask session signing

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here